Uploaded August 2026 | Updated September 2026, 2 weeks ago
Don't miss out! Join us at our next KubeCon + CloudNativeCon events in Shanghai, China (8-9 September, 2026) and Salt Lake City, United States (Nov 9–12, 2026). Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at kubecon.io
Pluggable Interception: Using ExtAuthz and ExtProc in gRPC Using XDS - Pawan Bhardwaj, Google
This talk introduces service extentions added in gRPC: ExtAuthz and ExtProc. Instead of relying on external proxies for interception, gRPC has added support for side channel callout to external services via xDS.
ExtAuthz: Perform real-time authorization by shipping peer identity and metadata to external services. It enables dynamic "allow/deny" decisions before an RPC is processed.
ExtProc: Provide deep packet interception for headers and gRPC message bodies using a specialized "GRPC" processing mode. It allows for sophisticated payload transformation, PII masking and message level filtering.
This enables "Security as a Service" model by decoupling complex logic from application and centralising it into pluggable , xDS managed services.
This session is a technical roadmap for developers looking to inject custom security , logging and business logic directly into gRPC data plane.
Don't miss out! Join us at our next KubeCon + CloudNativeCon events in Shanghai, China (8-9 September, 2026) and Salt Lake City, United States (Nov 9–12, 2026). Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at kubecon.io
Pluggable Interception: Using ExtAuthz and ExtProc in gRPC Using XDS - Pawan Bhardwaj, Google
This talk introduces service extentions added in gRPC: ExtAuthz and ExtProc. Instead of relying on external proxies for interception, gRPC has added support for side channel callout to external services via xDS.
ExtAuthz: Perform real-time authorization by shipping peer identity and metadata to external services. It enables dynamic "allow/deny" decisions before an RPC is processed.
ExtProc: Provide deep packet interception for headers and gRPC message bodies using a specialized "GRPC" processing mode. It allows for sophisticated payload transformation, PII masking and message level filtering.
This enables "Security as a Service" model by decoupling complex logic from application and centralising it into pluggable , xDS managed services.
This session is a technical roadmap for developers looking to inject custom security , logging and business logic directly into gRPC data plane.
